Do you need email to be able to change xbox password?

Do you just have to change the settings and boom at Xbox at any time or do you have to confirm by email etc?

Without knowing it exactly, I think you have to confirm the change.

Since the Microsoft account name is actually the email address, this shouldn't be a problem.

Changing foreign accounts is neither funny, cool or anything.

No. I leave a friend on my account and I get it back. Only wanted to know whether he needs access to the email or not.

Xbox acc and email are the same but both are different passwords if you know what I mean. So theoretically he can't do anything as long as he doesn't get into my email right?